DRIUS logoDRIUS

Security

Security at DRIUS

At DRIUS, security is a core principle of our platform design and operations. We build systems to protect customer data, minimize access, and reduce risk.

1. Security Philosophy

We follow a defense-in-depth approach and apply security best practices for modern SaaS platforms, guided by:

  • Least-privilege access
  • Separation of environments
  • Continuous monitoring
  • Responsible disclosure

2. Access Control

  • Access to customer data is restricted to authorized systems and personnel
  • Administrative actions (restore, export) are limited to authorized users
  • Internal access follows least-privilege principles

3. Encryption

  • All data in transit is encrypted using HTTPS/TLS
  • Stored data is encrypted at rest using industry-standard mechanisms
  • Secrets and credentials are stored securely and are not logged

4. Authentication & Authorization

  • Secure authentication mechanisms are enforced
  • API access is authenticated and scoped
  • Optional enterprise authentication features may be available on higher-tier plans

5. Infrastructure Security

  • DRIUS operates on cloud infrastructure with network isolation
  • Systems are monitored for availability and anomalous behavior
  • Software dependencies are updated regularly

6. Data Isolation

  • Customer data is logically isolated per account
  • Cross-tenant access is not permitted
  • Administrative access may be audited

7. Backups & Availability

  • DRIUS maintains internal system backups and monitoring
  • The Service is designed for reliability but does not guarantee uninterrupted availability
  • No service-level agreements (SLAs) apply unless explicitly agreed in writing

8. Incident Response

  • Security events are monitored and investigated
  • Reasonable steps are taken to contain and remediate incidents
  • Customers are notified where required by law

9. Responsible Disclosure

We welcome responsible disclosure of security issues. Please report concerns to [email protected].

10. Compliance

DRIUS follows security best practices aligned with common industry frameworks. We do not claim formal certifications (such as SOC 2 or ISO) unless explicitly stated.

11. No Affiliation with Okta

DRIUS is an independent platform. DRIUS is not affiliated with, endorsed by, or sponsored by Okta, Inc.